All attested to values of another user's metadata are duplicated and stored in the attestation event. The event is either encrypted or public. For a user's own attestations, a lock icon could appear on the profile image; this would be awesome, I think.
Discussion
Alright, then one could even have backups on a local relay. This certainly aounds like a NIP worthy of some discussion :)